Enterprises deployed AI agents faster than they built safeguards to control them, and they're now spending heavily to fix the gap.

VentureBeat Research surveyed five layers of the agentic stack in June and found that companies knowingly launched agents without adequate governance controls in place. The result: a scramble to retrofit security, monitoring, and management systems.

The data reveals significant vendor churn. Between 57 and 68 percent of enterprises plan to switch or add new governance vendors within 12 months across five control layers: identity management, agent evaluation, cost telemetry, context handling, and orchestration. About one-third plan to make those changes within the next quarter alone.

This reflects a broader pattern in enterprise AI adoption. Speed to deployment has outpaced maturity in governance. Companies prioritized getting agents into production over building the oversight infrastructure needed to manage them safely and cost-effectively.

The five control layers map directly to operational risks. Identity controls determine who or what can trigger agents. Evaluation systems measure whether agents produce correct outputs. Cost telemetry prevents runaway spending on API calls and compute. Context layers manage the information agents access and how they use it. Orchestration handles agent coordination and workflows.

Without these controls, enterprises face exposure: unauthorized agent usage, hallucinated outputs reaching customers, budget overruns, data leaks, and chaotic multi-agent interactions. The survey shows companies recognize this and are budgeting for remediation.

The vendor switching rate is particularly telling. Rather than patch existing tools, enterprises are replacing them wholesale. This suggests current governance solutions don't meet emerging requirements, forcing buyers to shop for alternatives that address agent-specific risks.

This governance gap has implications for AI adoption timelines. Companies that rushed agents to production now face technical debt in the form of retrofitted controls. Those planning deployments can learn from this: building governance first costs